Re: another one for client certificates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Johannes Rußek wrote:
| Hi Guys,
Hello Johannes,

| I'm trying to patch tls.c to make it able to pick different attributes
| in the client cert to authenticate from and will also try to update the
| openssl api in use if i get a bit help there.
While I'm very short of time (and quite lazy when I do have some),
I'm willing to look into it...

| if anyone else is using client certs and would lik to use them for cyrus
| auth, which attributes would you use?
| so far i came up with the current default commonName, the the userId
| (UID) and pkcs9 email for virtual domains.
| Anything else?

Do you also plan to look into the subjectAltName extension ?


Goetz

- --
DMCA: The greed of the few outweighs the freedom of the many
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIyteD2iGqZUF3qPYRAu8TAJ4hqb/pvY+ClGMxIgNtyoYoshxmLgCePY2Y
Nt/RdmhoHjPUiRn07yyu2xw=
=na5Q
-----END PGP SIGNATURE-----
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux